@sheremetat дуже схоже на #bbs та #fido. Не вистачає тільки свисту модему USRobotics на 14400

@eingfoan did a POC with Neowave cards that went live afterwards. Main target population was warehouse workers on shared workstations. Worked like a charm 👌
https://neowave.fr/en/products/fido-range/badgeo-nfc-fido-2/
#fido #webauthn #pki #security #2fa #fido2 #nostick #contactless

Ars Technica: Google announces new algorithm that makes FIDO encryption safe from quantum computers https://arstechnica.com/?p=1961906 #Tech #arstechnica #IT #Technology #quantumcomputing #Security #passkeys #Biz&IT #Fido

Google announces new algorithm that makes FIDO encryption safe from quantum computers - Enlarge (credit: Getty Images)

The FIDO2 industry standard ado... - https://arstechnica.com/?p=1961906 #quantumcomputing #security #passkeys #biz⁢ #fido

What de.fac2 ? Attacking an opensource U2F device in 30 minutes or less.

https://media.ccc.de/v/camp2023-57244-what_de_fac2_attacking_an_opensource_u2f_device_in_30_minutes_or_less

https://piped.adminforge.de/watch?v=DKAxW8W_XkE

Hardware #FIDO #U2F tokens are security devices which are meant to defend user second factor keys from physical and remote attacks.
In this presentation different security features and implemented by FIDO U2F tokens and how they are meant to protect a user from various attack scenarios.
We will focus on the open source implementation of FIDO U2F token developed and Common Criteria certified by Federal Office for Information Security (BSI).
Having access not only to the source code of the token applet, but the certification documents as well gives a unique opportunity of
Finally, a design flaw in the solution is discussed (CVE-2022-33172) and an attack on hardware token security feature will be presented, which could allow an attacker in control of user PC to fake user presence and execute a number of unauthorized sensitive operations.

#CCC
#sicherheit

What a time to be alive!

Back in the day I thought it meant "#Fido/Opus/Seadog Serial Interface Layer"...

https://en.wikipedia.org/wiki/Fossil_(software)

Passwörter im Internet sind oft nervig, schwer zu merken und dazu auch noch unsicher. Die Tech-Giganten Google, Apple und Microsoft wollen sie künftig durch sogenannte „Passkeys“ ersetzen. Sind die klassischen Passwörter also bald Vergangenheit?

#Biometrie #Datenschutz #FIDO #Passkeys #Passwörter #PublicKeyCryptography #ZurückZumThema

https://detektor.fm/digital/zurueck-zum-thema-passwoerter?utm_campaign=share_on_mastodon&utm_medium=mastodon&utm_source=mastodon

How Hype Will Turn Your #Security Key Into Junk
https://fy.blackhats.net.au/blog/2023-02-02-how-hype-will-turn-your-security-key-into-junk/

#passkeys #FIDO #FIDO2 #Authentication #2FA #Apple #yubikey #nitrokey #solokeys

@dborch Hach, 1989 mit #Kermit via #DFN über das HRZ Marburg ins #ARPA zu einer kanadischen Uni. Dort ein schwarzweißes GIF einer (kanadischen?) Landschaft runtergeladen. 8KB ca… das alles über #Akkustikkoppler…

#FIDO fand ich dann bis auf weiteres (1994) erstmal besser.

Do you have any idea what Passkeys are? If you don't, and want to find out more, check out this video by Shannon Morse.

#Security #Passkeys #Passwords #Yubikey #FIDO

https://youtu.be/wuylMMB8CsU

Who else is interested in trusted computing for cypherpunks?

https://tech.michaelaltfield.net/2023/02/16/evil-maid-heads-pureboot/

#linux #Coreboot #HEADS #Qubes #Whonix #Fedora #Xen #tor #u2f #FIDO #computers #crypto #PGP #attestation

Oh, there are now #FIDO security keys based on #Google's #OpenSK firmware for #Titan based on #TockOS (both in #Rust), available for purchase:
https://shop.ftsafe.us/products/opensk-v2

Do note that these do *not* feature a secure element and are not resistant to more advanced physical attacks or side channels, although still probably an upgrade to disk storage as long as you keep the key safe:
https://feitiantech.github.io/OpenSK_USB/caution/

Nevertheless, an interesting toy!

These days I'm primarily using #Firefox on my #Linux desktop (specifically Mint), and I'm curious if #passkey might be a reasonable option for me to use on sites that support it. I have an #Yubikey that I already use for #FIDO #2FA on sites that support it. I also have an Pixel phone with a titan chip, but I'm running #grapheneOS on there, and I'm not sure if that will complicate matters. Any relevant experience on either the phone or desktop front or pointers to relevant information would be appreciated.

Near as I can tell, it sort of sounds like passkey can work on Linux but maybe isn't supported in Firefox yet?

For those that use #hardware #SecurityKeys (#YubiKey etc) do you have a #backup at home or offsite? Do you just carry key(s) with you? I'm curious!

This is a multiple choice poll, pick the option(s) that apply to you!

Boost for reach? Thanks! 😊

(I have a key I carry with me, as well as a backup in a secure place at home, and a key at a trusted friends place as an offsite backup. Yes, adding new keys can be frustrating with managing the offsite ones back and forth...)

#Security #FIDO #TOTP

Mein neuer Artikel im #FedoraMagazine beschreibt wie du deine #LUKS Partition alternativ zum Passwort mit einen #TPM2 chip oder #FIDO #U2F hardware security token entschlüsseln kannst. Auf #Fedora bietet sich dazu #systemd #cryptenroll an.

https://fedoramagazine.org/use-systemd-cryptenroll-with-fido-u2f-or-tpm2-to-decrypt-your-disk/ [englisch]

This article shows how to use [#systemd #cryptenroll together with] either a #TPM2 chip or a #FIDO #U2F security key as an alternative factor to the passphrase when unlocking your [Linux] #LUKS partitions.

https://fedoramagazine.org/use-systemd-cryptenroll-with-fido-u2f-or-tpm2-to-decrypt-your-disk/ #encryption #fedora

VERY happy to read this article this morning about the #mainstreaming of #FIDO #passkeys. The #FIDOAlliance has come a long way in just a few short years! GO GET A FIDO KEY NOW! LMAO https://www.scmagazine.com/news/identity-and-access/new-passkey-milestones-ready-fido-[…]TZNFeMgC-fWHW4D2kUArnhA5Z2z1zf9jC1eUVAxZ7SODEsFnToocis_1hJw

Use FIDO U2F security keys with Fedora Linux 🔑
https://fedoramagazine.org/use-fido-u2f-security-keys-with-fedora-linux/

Hardware security keys are a form of multi-factor authentication for logging into important accounts. If you were thinking about getting a one, it's good to know Fedora supports them.

But remember to get two so you can make a backup!
#Fedora #FIDO #security #privacy

Today I disconnected my Yubi key and enabled passkey for my private Google account. Being in the Apple world, I hope sync of my passkeys with iCloud will be sufficient…

Lets see how this go! But I am a long way from ditching my 2FA verification app and password manager.

For more info: https://blog.google/technology/safety-security/one-step-closer-to-a-passwordless-future/

#Passwordless #Passkeys #Google #GoogleAccount #FIDO

Have you ever heard of a passkey? 🤔 Wondering how it works if you have multiple logins and devices? 🔑 Any ideas?!

@bitwarden have you started supporting this feature yet?

#passkey #cybersecurity #logins #devices #techtalk #securitybreach #Google #fido